Uncontrolled recursion in Decoder.Decode in encoding/gob before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a message which contains deeply nested structures.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade containers-commonUpgrade containernetworking-pluginsUpgrade container-selinuxUpgrade golang-testsUpgrade delveUpgrade grafanaUpgrade skopeoUpgrade toolboxUpgrade conmonUpgrade podman-remoteUpgrade podman-pluginsUpgrade criu-develUpgrade grafana-pcpUpgrade criu-libsUpgrade crunUpgrade libslirp-develUpgrade golang-binUpgrade golang-raceUpgrade python3-podmanUpgrade podmanUpgrade oci-seccomp-bpf-hookUpgrade skopeo-testsUpgrade golangUpgrade slirp4netnsUpgrade golang-miscUpgrade go-toolsetUpgrade golang-docsUpgrade udicaUpgrade cockpit-podmanUpgrade podman-gvproxyUpgrade podman-dockerUpgrade podman-testsUpgrade golang-srcUpgrade netavarkUpgrade critUpgrade aardvark-dnsUpgrade python3-criuUpgrade podman-catatonitUpgrade runcUpgrade git-lfsUpgrade fuse-overlayfsUpgrade criuUpgrade buildahUpgrade toolbox-testsUpgrade buildah-testsUpgrade libslirp | Aug 8, 2022 | Aug 1, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golang-miscUpgrade golang-testsUpgrade golang-github-kr-pty-develUpgrade golang-raceUpgrade golistUpgrade golang-github-gorilla-context-develUpgrade go-filesystemUpgrade golangUpgrade golang-googlecode-sqlite-develUpgrade runcUpgrade golang-docsUpgrade golang-binUpgrade go-srpm-macrosUpgrade go-rpm-templatesUpgrade golang-googlecode-net-develUpgrade golang-github-godbus-dbus-develUpgrade go-rpm-macrosUpgrade runc-debuginfoUpgrade golang-srcUpgrade golang-github-syndtr-gocapability-develUpgrade golist-debuginfoUpgrade golang-sharedUpgrade golang-github-gorilla-mux-devel | Oct 11, 2022 | Aug 10, 2022 |
| Amazon_linux | — | Upgrade golang | Sep 30, 2022 | Aug 3, 2022 |
| Amazon_linux_2023 | — | Upgrade golang-binUpgrade golang-testsUpgrade golang-sharedUpgrade golang-raceUpgrade golist-debuginfoUpgrade golist-debugsourceUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade golang-docsUpgrade golang-github-cpuguy83-md2manUpgrade golistUpgrade golang-srcUpgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade golang-miscUpgrade golangUpgrade golang-github-cpuguy83-md2man-devel | Feb 17, 2025 | Jul 12, 2022 |
| Centos_linux | — | Upgrade skopeoUpgrade cockpit-podmanUpgrade buildah-tests-debuginfoUpgrade conmonUpgrade golang-miscUpgrade golang-srcUpgrade grafana-debuginfoUpgrade delve-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade podman-pluginsUpgrade skopeo-debuginfoUpgrade buildah-debugsourceUpgrade delve-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade criu-libsUpgrade fuse-overlayfs-debugsourceUpgrade skopeo-debugsourceUpgrade buildah-debuginfoUpgrade netavarkUpgrade criuUpgrade golang-raceUpgrade golangUpgrade crun-debuginfoUpgrade podman-catatonitUpgrade podman-catatonit-debuginfoUpgrade criu-debuginfoUpgrade libslirp-develUpgrade fuse-overlayfs-debuginfoUpgrade git-lfs-debugsourceUpgrade podman-testsUpgrade containers-commonUpgrade podman-gvproxyUpgrade conmon-debugsourceUpgrade toolboxUpgrade buildahUpgrade python3-podmanUpgrade slirp4netnsUpgrade libslirpUpgrade fuse-overlayfsUpgrade golang-testsUpgrade git-lfsUpgrade crun-debugsourceUpgrade go-toolsetUpgrade toolbox-debugsourceUpgrade critUpgrade container-selinuxUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade grafana-pcp-debuginfoUpgrade conmon-debuginfoUpgrade buildah-testsUpgrade podman-remote-debuginfoUpgrade podman-debugsourceUpgrade udicaUpgrade skopeo-testsUpgrade crunUpgrade containernetworking-plugins-debuginfoUpgrade python3-criuUpgrade libslirp-debuginfoUpgrade podmanUpgrade grafanaUpgrade toolbox-debuginfoUpgrade libslirp-debugsourceUpgrade git-lfs-debuginfoUpgrade delveUpgrade containernetworking-pluginsUpgrade podman-plugins-debuginfoUpgrade slirp4netns-debuginfoUpgrade toolbox-testsUpgrade golang-binUpgrade criu-debugsourceUpgrade runc-debuginfoUpgrade runcUpgrade podman-dockerUpgrade golang-docsUpgrade criu-develUpgrade podman-debuginfoUpgrade slirp4netns-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade aardvark-dnsUpgrade runc-debugsourceUpgrade criu-libs-debuginfoUpgrade podman-remoteUpgrade grafana-pcp | Aug 2, 2022 | Aug 1, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Aug 10, 2022 |
| Freebsd | — | Upgrade go118Upgrade go117 | Nov 4, 2022 | Jul 13, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 4, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Nov 3, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golangUpgrade golang-srcUpgrade golang-bin | Nov 4, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Sep 14, 2022 | Aug 10, 2022 |
| Oracle_linux | — | Upgrade grafanaUpgrade python3-criuUpgrade criu-libsUpgrade delveUpgrade criu-develUpgrade golang-srcUpgrade go-toolsetUpgrade skopeo-testsUpgrade containers-commonUpgrade oci-seccomp-bpf-hookUpgrade podman-pluginsUpgrade libslirpUpgrade podman-gvproxyUpgrade cockpit-podmanUpgrade conmonUpgrade podman-testsUpgrade crunUpgrade slirp4netnsUpgrade container-selinuxUpgrade git-lfsUpgrade libslirp-develUpgrade aardvark-dnsUpgrade golang-binUpgrade buildah-testsUpgrade golang-raceUpgrade runcUpgrade criuUpgrade python3-podmanUpgrade golang-testsUpgrade podman-catatonitUpgrade skopeoUpgrade podman-dockerUpgrade golang-miscUpgrade udicaUpgrade golang-docsUpgrade buildahUpgrade podman-remoteUpgrade podmanUpgrade critUpgrade fuse-overlayfsUpgrade golangUpgrade containernetworking-pluginsUpgrade grafana-pcpUpgrade netavark | Aug 4, 2022 | Jul 12, 2022 |
| Redhat_linux | — | Upgrade podman-plugins-debuginfoUpgrade git-lfs-debugsourceUpgrade podman-debuginfoUpgrade podman-dockerUpgrade udicaUpgrade skopeoUpgrade container-selinuxUpgrade toolboxUpgrade runcUpgrade critUpgrade golang-docsUpgrade containernetworking-plugins-debugsourceUpgrade libslirp-debuginfoUpgrade slirp4netns-debuginfoUpgrade podman-gvproxyUpgrade podman-testsUpgrade criu-libs-debuginfoUpgrade git-lfsUpgrade podman-pluginsUpgrade slirp4netnsUpgrade criu-develUpgrade containernetworking-plugins-debuginfoUpgrade toolbox-debugsourceUpgrade delve-debugsourceUpgrade go-toolsetUpgrade podman-debugsourceUpgrade crunUpgrade skopeo-debuginfoUpgrade buildah-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade slirp4netns-debugsourceNo solution existsUpgrade toolbox-debuginfoUpgrade podman-catatonit-debuginfoUpgrade grafanaUpgrade python3-criuUpgrade libslirpUpgrade runc-debuginfoUpgrade golang-binUpgrade delveUpgrade grafana-pcp-debuginfoUpgrade libslirp-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade conmonUpgrade skopeo-testsUpgrade conmon-debuginfoUpgrade cockpit-podmanUpgrade buildah-debuginfoUpgrade conmon-debugsourceUpgrade buildah-testsUpgrade containers-commonUpgrade crun-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade podman-remote-debuginfoUpgrade podman-remoteUpgrade podman-catatonitUpgrade golang-srcUpgrade podmanUpgrade golang-raceUpgrade golangUpgrade criuUpgrade libslirp-develUpgrade containernetworking-pluginsUpgrade grafana-debuginfoUpgrade fuse-overlayfsUpgrade git-lfs-debuginfoUpgrade skopeo-debugsourceUpgrade criu-debuginfoUpgrade python3-podmanUpgrade toolbox-testsUpgrade buildahUpgrade netavarkUpgrade fuse-overlayfs-debugsourceUpgrade criu-libsUpgrade golang-testsUpgrade runc-debugsourceUpgrade golang-miscUpgrade criu-debugsourceUpgrade aardvark-dnsUpgrade fuse-overlayfs-debuginfoUpgrade delve-debuginfoUpgrade grafana-pcpUpgrade crun-debuginfoUpgrade buildah-tests-debuginfo | Aug 3, 2022 | Aug 1, 2022 |
| Rocky_linux | — | Upgrade libslirp-develUpgrade python3-criuUpgrade criu-debugsourceUpgrade critUpgrade criu-libsUpgrade grafana-pcpUpgrade libslirp-debuginfoUpgrade go-toolsetUpgrade golangUpgrade grafanaUpgrade git-lfs-debuginfoUpgrade golang-binUpgrade criu-debuginfoUpgrade git-lfsUpgrade delve-debuginfoUpgrade criu-libs-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade grafana-debuginfoUpgrade golang-raceUpgrade criu-develUpgrade delveUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade delve-debugsourceUpgrade git-lfs-debugsourceUpgrade criuUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade grafana-pcp-debuginfoUpgrade libslirp-debugsourceUpgrade libslirp | Mar 12, 2024 | Aug 10, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.0.5Upgrade Splunk Enterprise to version 9.0.6Upgrade Splunk Enterprise to version 9.1.1Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 8.2.12Upgrade Splunk Enterprise to version 8.2.11 | Sep 30, 2025 | Aug 9, 2022 |
| Suse | — | Upgrade go1.18-docUpgrade go1.17-docUpgrade go1.18-opensslUpgrade go1.18Upgrade go1.18-raceUpgrade go1.18-openssl-raceUpgrade go1.18-openssl-docUpgrade go1.17-raceUpgrade go1.17 | Oct 26, 2022 | Aug 10, 2022 |
| Ubuntu | — | Upgrade golang-1.13-src (Ubuntu Pro)Upgrade golang-1.13-srcUpgrade golang-1.13 (Ubuntu Pro)Upgrade golang-1.13-go (Ubuntu Pro)Upgrade golang-1.16 (Ubuntu Pro)Upgrade golang-1.13Upgrade golang-1.13-goUpgrade golang-1.18-srcUpgrade golang-1.16-go (Ubuntu Pro)Upgrade golang-1.18Upgrade golang-1.16-src (Ubuntu Pro)Upgrade golang-1.16-srcUpgrade golang-1.16Upgrade golang-1.16-goUpgrade golang-1.18-go | May 1, 2023 | Aug 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub